CVE-2024-10727: Cross-Site Scripting (XSS) in phpipam/phpipam
A reflected cross-site scripting (XSS) vulnerability exists in phpipam/phpipam versions 1.5.0 through 1.6.0. The vulnerability arises when the application receives data in an HTTP request and includes that data within the immediate response in an unsafe manner. This allows an attacker to execute arbitrary JavaScript in the context of the user's browser, potentially leading to full compromise of the user.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10727?
The severity of CVE-2024-10727 is classified as medium due to its potential for exploitation through reflected XSS attacks.
How do I fix CVE-2024-10727?
To fix CVE-2024-10727, upgrade phpipam to a version higher than 1.6.0, where the vulnerability has been addressed.
Which versions of phpipam are affected by CVE-2024-10727?
CVE-2024-10727 affects phpipam versions 1.5.0 through 1.6.0.
What type of attack can be executed due to CVE-2024-10727?
CVE-2024-10727 allows for reflected cross-site scripting (XSS) attacks, enabling attackers to inject malicious scripts into responses.
Is user data at risk with CVE-2024-10727?
Yes, CVE-2024-10727 poses a risk to user data as it can enable attackers to execute scripts in the users' browsers, potentially stealing sensitive information.